Security

What you entrust to us is protected, and remains yours

People entrust Milele with what they hold most dear: memories, wishes, words for those who remain. Here, without jargon, is where it all lives and what protects it.

Where your data is

Your writing, memories and files are stored by Supabase, on Amazon Web Services servers in Virginia (United States). The site itself is served by Vercel.
A few providers are involved, each for a single task: Resend for email, Stripe for payments (Milele never sees your card number), Backblaze for backup copies, and Anthropic to answer your questions to Malaika, only if you have agreed.
We do not sell your data, we show no advertising and the site loads no advertising trackers.
We count visits anonymously (Vercel Web Analytics): no cookies, no identifier that follows you from site to site, only the number of visits per page. When you sign up, we note the page through which you arrived, to learn which pages are useful.

How it is protected

Everything travelling between your device and Milele is encrypted (HTTPS), and the data is encrypted on the host's disks.
Each item carries its own access rules, enforced by the database itself: a loved one only sees what you have opened to them.
You can protect your account with two-factor authentication (a six-digit code in addition to the password). Enable two-factor authentication
The vault on the Documents page is encrypted on your device with a passphrase only you know, and can be opened with your fingerprint or face. No one at Milele can read it.

Backups

Every night, an encrypted copy of the database and all files goes to a second provider, separate from the main host. Copies are kept for 30 days, and restoring them has been tested.
An automatic check verifies every five minutes that Milele is responding, and alerts the team in case of an outage.

You stay in control

At any time, you can download an archive of everything you have entrusted to Milele: writing, wishes, capsules, memorials, and your files. Export my data
You can delete your account yourself; what you have created is erased with it. Delete my account
You can block a member and report any content. When the team removes content, its author is notified, with the reason and how to contest it.

Found a security flaw? Write to us at support@milele4ever.com: we answer, and we fix it.